v6

Changelog for 6.1.6 (v6-devel)

Version 6.1.6 [DEVEL] (rgerhards), 2011-03-14

Changelog for 6.1.5 (v6 devel)

Version 6.1.5 [DEVEL] (rgerhards), 2011-03-04

  • improved testbench
  • enhanced imtcp to use a pool of worker threads to process incoming
    messages. This enables higher processing rates, especially in the TLS
    case (where more CPU is needed for the crypto functions)
  • added support for TLS (in anon mode) to tcpflood
  • improved TLS error reporting
  • improved TLS startup (Diffie-Hellman bits do not need to be generated,
    as we do not support full anon key exchange — we always need certs)
  • bugfix: fixed a memory leak and potential abort condition
    this could happen if multiple rulesets were used and some output batches
    contained messages belonging to more than one ruleset.
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=226
    fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=218
  • bugfix: memory leak when $RepeatedMsgReduction on was used
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=225
  • bugfix: potential abort condition when $RepeatedMsgReduction set to on
    as well as potentially in a number of other places where MsgDup() was
    used. This only happened when the imudp input module was used and it
    depended on name resolution not yet had taken place. In other words,
    this was a strange problem that could lead to hard to diagnose
    instability. So if you experience instability, chances are good that
    this fix will help.

Changelog for 6.1.4 (devel)

Version 6.1.4 [DEVEL] (rgerhards), 2011-02-18

  • bugfix/omhdfs: directive $OMHDFSFileName rendered unusable
    due to a search and replace-induced bug ;)
  • bugfix: minor race condition in action.c – considered cosmetic
    This is considered cosmetic as multiple threads tried to write exactly
    the same value into the same memory location without sync. The method
    has been changed so this can no longer happen.
  • added pmsnare parser module (written by David Lang)
  • enhanced imfile to support non-cancel input termination
  • improved systemd socket activation thanks to Marius Tomaschweski
  • improved error reporting for $WorkDirectory
    non-existance and other detectable problems are now reported,
    and the work directory is NOT set in this case
  • bugfix: pmsnare causded abort under some conditions
  • bugfix: abort if imfile reads file line of more than 64KiB
    Thanks to Peter Eisentraut for reporting and analysing this problem.
    bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=221
  • bugfix: queue engine did not properly slow down inputs in FULL_DELAY mode
    when in disk-assisted mode. This especially affected imfile, which
    created unnecessarily queue files if a large set of input file data was
    to process.
  • bugfix: very long running actions could prevent shutdown under some
    circumstances. This has now been solved, at least for common
    situations.
  • bugfix: fixed compile problem due to empty structs
    this occured only on some platforms/compilers. thanks to Dražen Kačar
    for the fix
Scroll to top